diff --git a/apparmor.d/groups/lxqt/lxqt-config-appearance b/apparmor.d/groups/lxqt/lxqt-config-appearance new file mode 100644 index 000000000..edc1c9abb --- /dev/null +++ b/apparmor.d/groups/lxqt/lxqt-config-appearance @@ -0,0 +1,39 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +#include + +@{exec_path} = @{bin}/lxqt-config-appearance +profile lxqt-config-appearance @{exec_path} { + include + include + include + include + include + include + include + include + include + + @{exec_path} mr, + @{bin}/gsettings rPx, + + /usr/share/libdrm/amdgpu.ids r, + + owner @{user_config_dirs}/lxqt/** rwkl -> @{user_config_dirs}/lxqt/#@{int}, + owner @{user_config_dirs}/dconf/user r, + owner @{user_config_dirs}/pcmanfm-qt/lxqt/settings.conf r, + + owner /tmp/#@{int} rw, + owner /tmp/** rwkl -> /tmp/#@{int}, + + @{sys}/devices/@{pci_bus}/{,**} r, + @{sys}/devices/@{pci_bus}/**/**/** r, + + @{PROC}/sys/kernel/random/boot_id r, + + /dev/tty rw, + +}